@perrylink/dsh-cert-mcp 0.1.4 → 0.1.6

package/LICENSE

@@ -1,201 +1,201 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "[]"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright [yyyy] [name of copyright owner]
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,73 +1,150 @@
-# dsh-cert-mcp
-
-[![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](LICENSE)
-[![DSH plugin](https://img.shields.io/badge/dsh--plugin-✅-green)](https://github.com/topics/dsh-plugin)
-[![Gitee](https://img.shields.io/badge/Gitee-mirror-c71d23?logo=gitee)](https://gitee.com/perrylink/dsh-cert-mcp)
-[![Version](https://img.shields.io/github/v/tag/PerryLink/dsh-cert-mcp?label=version)](https://github.com/PerryLink/dsh-cert-mcp/releases)
-[![npm version](https://img.shields.io/npm/v/%40perrylink%2Fdsh-cert-mcp)](https://www.npmjs.com/package/@perrylink/dsh-cert-mcp)
-[![npm downloads](https://img.shields.io/npm/dm/%40perrylink%2Fdsh-cert-mcp)](https://www.npmjs.com/package/@perrylink/dsh-cert-mcp)
-[![dsh-cert-mcp MCP server](https://glama.ai/mcp/servers/PerryLink/dsh-cert-mcp/badges/score.svg)](https://glama.ai/mcp/servers/PerryLink/dsh-cert-mcp)
-[![dsh-cert-mcp MCP server](https://glama.ai/mcp/servers/PerryLink/dsh-cert-mcp/badges/card.svg)](https://glama.ai/mcp/servers/PerryLink/dsh-cert-mcp)
-
-Read-only [MCP](https://modelcontextprotocol.io) server that exposes the [dsh-plugin-certification](https://github.com/PerryLink/dsh-plugin-certification) registry: certification grades, snapshot dates and five-dimension evidence for DeepSeek Harness (DSH) plugins. Zero runtime dependencies, stdio transport.
-
-## Tools
-
-| Tool | Input | Returns |
-|---|---|---|
-| `get_certification` | `owner`, `repo` | Full certification record (grade, snapshot, five dimensions, veto, notes) or "no record" |
-| `list_certified` | — | Every entry in the public registry: repo / grade / snapshot |
-| `certification_spec` | — | Spec v1 summary: five dimensions, grade scale, veto rule |
-
-The embedded snapshot lives in `data/certified.json` (synced from the certification repo) and the server refreshes it from the public registry at most once per five minutes. No writes, no secrets, no code execution.
-
-## Install
-
-```sh
-git clone https://github.com/PerryLink/dsh-cert-mcp
-cd dsh-cert-mcp
-node src/index.js        # stdio server
-```
-
-Run it directly from the published npm package: `npx @perrylink/dsh-cert-mcp`.
-
-### Register in an MCP client
-
-Claude Code:
-
-```sh
-claude mcp add dsh-cert -- node <path-to-repo>/src/index.js
-```
-
-Claude Desktop (`claude_desktop_config.json`):
-
-```json
-{
-  "mcpServers": {
-    "dsh-cert": {
-      "command": "node",
-      "args": ["<path-to-repo>/src/index.js"]
-    }
-  }
-}
-```
-
-DSH: add it through [dsh-mcp-panel](https://github.com/PerryLink/dsh-mcp-panel) as a stdio server, or any MCP client that supports `stdio`.
-
-## Why this exists
-
-The official DeepSeek Harness repository does not run a plugin registry and does not accept external PRs; discovery happens through the `dsh-plugin` GitHub topic and community lists, none of which certify anything. `dsh-plugin-certification` turns "can I install this plugin" into a reproducible five-dimension check (manifest, build hygiene, supply-chain Scorecard, release provenance, sandboxed install smoke test) with a public registry and README badges. This MCP server is the same data with an agent-facing interface: agents can look up a plugin's certification before recommending or installing it.
-
-## Registry
-
-Data source: [PerryLink/dsh-plugin-certification](https://github.com/PerryLink/dsh-plugin-certification) — `data/certified.json`, spec v1.
-
-## Development
-
-```sh
-node test/smoke.mjs
-```
-
-## License
-
-Apache-2.0. A listing or grade is an evidence record, not a security guarantee: plugins run inside your DSH process with your permissions.
+# dsh-cert-mcp
+
+[![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](LICENSE)
+[![DSH plugin](https://img.shields.io/badge/dsh--plugin-✅-green)](https://github.com/topics/dsh-plugin)
+[![Gitee](https://img.shields.io/badge/Gitee-mirror-c71d23?logo=gitee)](https://gitee.com/perrylink/dsh-cert-mcp)
+[![Version](https://img.shields.io/github/v/tag/PerryLink/dsh-cert-mcp?label=version)](https://github.com/PerryLink/dsh-cert-mcp/releases)
+[![npm version](https://img.shields.io/npm/v/%40perrylink%2Fdsh-cert-mcp)](https://www.npmjs.com/package/@perrylink/dsh-cert-mcp)
+[![npm downloads](https://img.shields.io/npm/dm/%40perrylink%2Fdsh-cert-mcp)](https://www.npmjs.com/package/@perrylink/dsh-cert-mcp)
+[![dsh-cert-mcp MCP server](https://glama.ai/mcp/servers/PerryLink/dsh-cert-mcp/badges/score.svg)](https://glama.ai/mcp/servers/PerryLink/dsh-cert-mcp)
+[![dsh-cert-mcp MCP server](https://glama.ai/mcp/servers/PerryLink/dsh-cert-mcp/badges/card.svg)](https://glama.ai/mcp/servers/PerryLink/dsh-cert-mcp)
+
+Read-only [MCP](https://modelcontextprotocol.io) server that exposes the [dsh-plugin-certification](https://github.com/PerryLink/dsh-plugin-certification) registry: certification grades, snapshot dates and five-dimension evidence for DeepSeek Harness (DSH) plugins. Zero runtime dependencies, stdio transport.
+
+## Tools
+
+| Tool | Input | Returns |
+|---|---|---|
+| `get_certification` | `owner`, `repo` | Full certification record (grade, snapshot, five dimensions, veto, notes) or "no record" |
+| `list_certified` | — | Every entry in the public registry: repo / grade / snapshot |
+| `certification_spec` | — | Spec v1 summary: five dimensions, grade scale, veto rule |
+
+The embedded snapshot lives in `data/certified.json` (synced from the certification repo) and the server refreshes it from the public registry at most once per five minutes. No writes, no secrets, no code execution.
+
+## Install
+
+```sh
+git clone https://github.com/PerryLink/dsh-cert-mcp
+cd dsh-cert-mcp
+node src/index.js        # stdio server
+```
+
+Run it directly from the published npm package: `npx @perrylink/dsh-cert-mcp`.
+
+### Register in an MCP client
+
+Claude Code:
+
+```sh
+claude mcp add dsh-cert -- node <path-to-repo>/src/index.js
+```
+
+Claude Desktop (`claude_desktop_config.json`):
+
+```json
+{
+  "mcpServers": {
+    "dsh-cert": {
+      "command": "node",
+      "args": ["<path-to-repo>/src/index.js"]
+    }
+  }
+}
+```
+
+DSH: add it through [dsh-mcp-panel](https://github.com/PerryLink/dsh-mcp-panel) as a stdio server, or any MCP client that supports `stdio`.
+
+### Install as a DSH bundle
+
+The package declares `dsh.bundle.patch` → `cordis.patch.yml`, so it also installs as a DeepSeek Harness bundle:
+
+```sh
+# git channel (latest main)
+dsh plugin --profile web add "github:PerryLink/dsh-cert-mcp#main"
+
+# npm channel (published releases)
+dsh plugin --profile web add @perrylink/dsh-cert-mcp
+```
+
+The inserted row loads the package through the standard Cordis plugin contract: the host half is a plain ESM module exporting `apply(ctx)` (declaring `inject` only when it needs services). This package ships no browser UI, so there is no `dsh.client` declaration.
+
+```js
+// bundle entry (host half) — the contract the patch row loads
+export function apply(ctx) {
+  // registers the read-only certification lookup surface
+  // (get_certification / list_certified / certification_spec)
+}
+```
+
+Remove it with `dsh plugin --profile web remove @perrylink/dsh-cert-mcp` (or delete the row from the profile patch). The standalone stdio MCP server above keeps working for any MCP client.
+
+## Why this exists
+
+The official DeepSeek Harness repository does not run a plugin registry and does not accept external PRs; discovery happens through the `dsh-plugin` GitHub topic and community lists, none of which certify anything. `dsh-plugin-certification` turns "can I install this plugin" into a reproducible five-dimension check (manifest, build hygiene, supply-chain Scorecard, release provenance, sandboxed install smoke test) with a public registry and README badges. This MCP server is the same data with an agent-facing interface: agents can look up a plugin's certification before recommending or installing it.
+
+## Registry
+
+Data source: [PerryLink/dsh-plugin-certification](https://github.com/PerryLink/dsh-plugin-certification) — `data/certified.json`, spec v1.
+
+## Development
+
+```sh
+node test/smoke.mjs
+```
+
+## PerryLink DSH Plugin Family
+
+This project is one of the [40 DeepSeek Harness plugins](https://github.com/PerryLink) maintained by [PerryLink](https://github.com/PerryLink). If this one helps you, the others likely will too:
+
+| Plugin | One-liner |
+|---|---|
+| **[dsh-auto-review](https://github.com/PerryLink/dsh-auto-review)** | Second-model auto-review on the approval chain, fail-closed by default | |
+| **[dsh-autotier](https://github.com/PerryLink/dsh-autotier)** | Automatic strong/cheap model-tier routing with deterministic risk guards and a `/tier` command | |
+| **[dsh-background-agents](https://github.com/PerryLink/dsh-background-agents)** | Durable background child agents with a Web UI sidebar, messaging and interrupt | |
+| **[dsh-budget](https://github.com/PerryLink/dsh-budget)** | Cost governance for DeepSeek Harness: budgets, carbon, and latency in one panel. | |
+| **[dsh-catalog](https://github.com/PerryLink/dsh-catalog)** | DSH Desktop Market standard catalog source for the PerryLink family | |
+| **[dsh-checkpoint-rewind](https://github.com/PerryLink/dsh-checkpoint-rewind)** | Unified session + workspace + config checkpoints with one-shot `/rewind` | |
+| **[dsh-claude-move](https://github.com/PerryLink/dsh-claude-move)** | Migrate Claude Code, Codex, OpenCode and Hermes sessions, memories and skills into DSH | |
+| **[dsh-click](https://github.com/PerryLink/dsh-click)** | Cross-platform native desktop control for DeepSeek Harness — Windows first. | |
+| **[dsh-composer-history](https://github.com/PerryLink/dsh-composer-history)** | Terminal-style input history for the web composer: arrows, Ctrl+R search | |
+| **[dsh-data-quality](https://github.com/PerryLink/dsh-data-quality)** | Deterministic dataset profiling, cleaning and citation verification | |
+| **[dsh-defend](https://github.com/PerryLink/dsh-defend)** | Prompt-injection, jailbreak, and secret-leak defense for DeepSeek Harness. | |
+| **[dsh-doublecheck](https://github.com/PerryLink/dsh-doublecheck)** | Engineering-discipline guard: requirements grill, test gates, adversary review | |
+| **[dsh-draw](https://github.com/PerryLink/dsh-draw)** | Unified static-image generation routing for DeepSeek Harness. | |
+| **[dsh-fast](https://github.com/PerryLink/dsh-fast)** | Read-only performance diagnostics: load, spill, compaction and cache hit rate | |
+| **[dsh-fund-research](https://github.com/PerryLink/dsh-fund-research)** | Chinese mutual-fund research with sealed, traceable source snapshots | |
+| **[dsh-github](https://github.com/PerryLink/dsh-github)** | GitHub PR/issue/CI integration with every write approval-gated | |
+| **[dsh-industry-research](https://github.com/PerryLink/dsh-industry-research)** | Industry and company research pack: chain map, policy timeline, company cards | |
+| **[dsh-kit](https://github.com/PerryLink/dsh-kit)** | One-command starter pack that installs the core family | |
+| **[dsh-library](https://github.com/PerryLink/dsh-library)** | Local document knowledge base with hybrid search and citation-aware injection | |
+| **[dsh-local-ai](https://github.com/PerryLink/dsh-local-ai)** | Local Ollama model discovery and task-based routing with cloud fallback | |
+| **[dsh-lsp-actions](https://github.com/PerryLink/dsh-lsp-actions)** | LSP diagnostics, formatting, completion, code actions, symbols and rename | |
+| **[dsh-mask](https://github.com/PerryLink/dsh-mask)** | PII masking at the model boundary with a host-side restore table | |
+| **[dsh-mcp-panel](https://github.com/PerryLink/dsh-mcp-panel)** | MCP management console: `/mcp` command, Settings tab and trial calls | |
+| **[dsh-memento](https://github.com/PerryLink/dsh-memento)** | Approval-gated cross-session memory protocol (`ctx.memory` + SQLite) | |
+| **[dsh-observe](https://github.com/PerryLink/dsh-observe)** | OpenTelemetry and Langfuse telemetry export from the session event stream | |
+| **[dsh-output-styles](https://github.com/PerryLink/dsh-output-styles)** | Runtime-switchable model output styles | |
+| **[dsh-permission-rules](https://github.com/PerryLink/dsh-permission-rules)** | Declarative allow/deny/ask rules plus a process-level network policy | |
+| **[dsh-plugin-certification](https://github.com/PerryLink/dsh-plugin-certification)** | Community certification registry with repro-checkable grades and badges | |
+| **[dsh-plugin-doctor](https://github.com/PerryLink/dsh-plugin-doctor)** | Zero-dependency static + sandbox smoke detector for DSH plugins | |
+| **[dsh-plugin-guide](https://github.com/PerryLink/dsh-plugin-guide)** | Plugin-dev knowledge base, agent skill and the `dsh-plugin-dev` CLI toolchain | |
+| **[dsh-plugin-kit](https://github.com/PerryLink/dsh-plugin-kit)** | Shared zero-runtime-dependency toolkit for the PerryLink DSH plugins | |
+| **[dsh-plugin-portal](https://github.com/PerryLink/dsh-plugin-portal)** | Zero-dependency static portal rendering the whole plugin family as one page | |
+| **[dsh-plugin-upgrade-015](https://github.com/PerryLink/dsh-plugin-upgrade-015)** | Merged `0.1.3-alpha.1` → `0.1.5-rc.1` upgrade corridor card plus a zero-dependency seam scanner | |
+| **[dsh-reach](https://github.com/PerryLink/dsh-reach)** | Multi-channel approval/question bridge: WeChat, Telegram, Feishu + a session console | |
+| **[dsh-research-report](https://github.com/PerryLink/dsh-research-report)** | Verifiable research reports: evidence ledger, manifest seal, per-claim verdicts | |
+| **[dsh-score](https://github.com/PerryLink/dsh-score)** | Multi-dimensional plugin quality scoring with an evidence-backed leaderboard | |
+| **[dsh-session-pin](https://github.com/PerryLink/dsh-session-pin)** | Pin sessions and workspaces in the Web sidebar with per-pin colors | |
+| **[dsh-session-sync](https://github.com/PerryLink/dsh-session-sync)** | Git-backed cross-device session synchronization with keep-both merges | |
+| **[dsh-skill-pack-security](https://github.com/PerryLink/dsh-skill-pack-security)** | Security-audit skill pack plus the `plugin_vet` supply-chain gate | |
+| **[dsh-talk](https://github.com/PerryLink/dsh-talk)** | Voice-first session loop: speech-to-text input and text-to-speech replies | |
+| **[dsh-team-rooms](https://github.com/PerryLink/dsh-team-rooms)** | Cross-session team rooms: shared message bus, task board and timeline | |
+| **[dsh-test-drive](https://github.com/PerryLink/dsh-test-drive)** | Isolated install-and-smoke test drives with a pass/fail matrix | |
+| **[dsh-ticktick](https://github.com/PerryLink/dsh-ticktick)** | TickTick/Dida365 task bridge: session-header panel plus eleven agent tools | |
+| **[dsh-translate](https://github.com/PerryLink/dsh-translate)** | Vendor parameter translation and deterministic JSON repair | |
+| **[dsh-wechat](https://github.com/pan17/dsh-wechat)** | WeChat ↔ DSH bridge (Tencent iLink bot) developed with [pan17](https://github.com/pan17/dsh-wechat), who hosts the repo | |
+| **[dsh-personal-directive](https://github.com/PerryLink/dsh-personal-directive)** | Personal directive injector with a top-bar toggle (fork of liucai2026/dsh-personal-directive) | |
+
+## License
+
+Apache-2.0. A listing or grade is an evidence record, not a security guarantee: plugins run inside your DSH process with your permissions.

package/cordis.patch.yml

@@ -0,0 +1,8 @@
+# SPDX-License-Identifier: Apache-2.0
+# dsh-cert-mcp bundle patch: mount the read-only certification-registry MCP
+# package as a bundle row. `name` is the npm package name, resolved through
+# the profile's node_modules; an id-targeted override replaces the whole
+# config row — restate every key when overriding.
+- insert:
+    - id: cert-mcp
+      name: '@perrylink/dsh-cert-mcp'

package/data/certified.json

@@ -1,37 +1,37 @@
-{
-  "specVersion": "v1",
-  "generatedAt": "2026-09-07",
-  "entries": [
-    {
-      "repo": "PerryLink/dsh-auto-review",
-      "grade": "A",
-      "specVersion": "v1",
-      "snapshot": "2026-09-07",
-      "dimensions": {
-        "manifest": {
-          "result": "pass",
-          "evidence": "dsh.bundle manifest + Apache-2.0 + keywords/topics aligned + five-language READMEs + engines ^22.19.0 || >=24.0.0 (repo + npm registry scan 2026-09-07, v0.10.4)"
-        },
-        "buildHygiene": {
-          "result": "pass",
-          "evidence": "files allowlist + peerDependencies (optional client peers, range >=0.1.2-rc.1 <0.2.0 since 2026-09-05) + typecheck/test/build/check:readmes/pack gates; 2026-09-06 batch D-stage gate chain green at v0.10.4 (frozen install, typecheck, 276/276 tests, build, verify:self-contained, pack) + main ci success on 3f9cdae (2026-09-06T12:32Z); no malicious postinstall patterns"
-        },
-        "supplyChain": {
-          "result": "pass",
-          "score": 5.4,
-          "evidence": "https://api.securityscorecards.dev/projects/github.com/PerryLink/dsh-auto-review fresh run 2026-09-06T12:32:32Z on main 3f9cdae (scorecard v5.5.0); Scorecard supply-chain workflow success on the same SHA"
-        },
-        "releaseIntegrity": {
-          "result": "pass",
-          "evidence": "npm publish --provenance via publish workflow with id-token + Trusted Publishing; dsh-auto-review@0.10.4 on npm since 2026-09-05T15:04Z - registry dist.attestations + slsa.dev/provenance/v1 + GitHub Actions trusted publisher verified directly 2026-09-07"
-        },
-        "installSmoke": {
-          "result": "ok",
-          "evidence": "2026-09-06 batch D-stage (isolated throwaway profile, npx @deepseek-ai/dsh@0.1.2-rc.1): the standard `dsh plugin --profile web add <tarball>` fails with ERR_PNPM_IGNORED_BUILDS (pnpm 11 ignored-builds environmental gate); the documented compat recipe (pnpm-workspace.yaml allowBuilds preset for dsh-subprocess-local/koffi/node-pty/protobufjs) then installs cleanly - add exit 0 (resolved 381, added 271), dump-config shows the plugin row + bundle layer, keyless headless reaches MISSING_CREDENTIAL (tree-load proof). Reproduction: _scratch/batch-2026-09-06/verify/dsh-auto-review.md"
-        }
-      },
-      "veto": null,
-      "notes": "Registry entry refreshed for 0.10.4 (published 2026-09-05 with OIDC provenance). E upgraded from environment-blocked to ok via the documented allowBuilds compat recipe (the same method the repo's compat.yml uses); the bare unattended install still hits pnpm's ignored-builds gate, recorded above. Grade B -> A."
-    }
-  ]
-}
+{
+  "specVersion": "v1",
+  "generatedAt": "2026-09-07",
+  "entries": [
+    {
+      "repo": "PerryLink/dsh-auto-review",
+      "grade": "A",
+      "specVersion": "v1",
+      "snapshot": "2026-09-07",
+      "dimensions": {
+        "manifest": {
+          "result": "pass",
+          "evidence": "dsh.bundle manifest + Apache-2.0 + keywords/topics aligned + five-language READMEs + engines ^22.19.0 || >=24.0.0 (repo + npm registry scan 2026-09-07, v0.10.4)"
+        },
+        "buildHygiene": {
+          "result": "pass",
+          "evidence": "files allowlist + peerDependencies (optional client peers, range >=0.1.2-rc.1 <0.2.0 since 2026-09-05) + typecheck/test/build/check:readmes/pack gates; 2026-09-06 batch D-stage gate chain green at v0.10.4 (frozen install, typecheck, 276/276 tests, build, verify:self-contained, pack) + main ci success on 3f9cdae (2026-09-06T12:32Z); no malicious postinstall patterns"
+        },
+        "supplyChain": {
+          "result": "pass",
+          "score": 5.4,
+          "evidence": "https://api.securityscorecards.dev/projects/github.com/PerryLink/dsh-auto-review fresh run 2026-09-06T12:32:32Z on main 3f9cdae (scorecard v5.5.0); Scorecard supply-chain workflow success on the same SHA"
+        },
+        "releaseIntegrity": {
+          "result": "pass",
+          "evidence": "npm publish --provenance via publish workflow with id-token + Trusted Publishing; dsh-auto-review@0.10.4 on npm since 2026-09-05T15:04Z - registry dist.attestations + slsa.dev/provenance/v1 + GitHub Actions trusted publisher verified directly 2026-09-07"
+        },
+        "installSmoke": {
+          "result": "ok",
+          "evidence": "2026-09-06 batch D-stage (isolated throwaway profile, npx @deepseek-ai/dsh@0.1.2-rc.1): the standard `dsh plugin --profile web add <tarball>` fails with ERR_PNPM_IGNORED_BUILDS (pnpm 11 ignored-builds environmental gate); the documented compat recipe (pnpm-workspace.yaml allowBuilds preset for dsh-subprocess-local/koffi/node-pty/protobufjs) then installs cleanly - add exit 0 (resolved 381, added 271), dump-config shows the plugin row + bundle layer, keyless headless reaches MISSING_CREDENTIAL (tree-load proof). Reproduction: _scratch/batch-2026-09-06/verify/dsh-auto-review.md"
+        }
+      },
+      "veto": null,
+      "notes": "Registry entry refreshed for 0.10.4 (published 2026-09-05 with OIDC provenance). E upgraded from environment-blocked to ok via the documented allowBuilds compat recipe (the same method the repo's compat.yml uses); the bare unattended install still hits pnpm's ignored-builds gate, recorded above. Grade B -> A."
+    }
+  ]
+}

package/package.json

@@ -1,44 +1,55 @@
-{
-  "name": "@perrylink/dsh-cert-mcp",
-  "version": "0.1.4",
-  "description": "Read-only MCP server exposing the dsh-plugin-certification registry: certification grades, snapshots and five-dimension evidence for DeepSeek Harness plugins.",
-  "type": "module",
-  "license": "Apache-2.0",
-  "bin": {
-    "dsh-cert-mcp": "src/index.js"
-  },
-  "files": [
-    "src",
-    "data",
-    "README.md",
-    "LICENSE"
-  ],
-  "engines": {
-    "node": ">=18"
-  },
-  "keywords": [
-    "mcp",
-    "mcp-server",
-    "model-context-protocol",
-    "deepseek-harness",
-    "dsh-plugin",
-    "dsh",
-    "certification",
-    "supply-chain-security"
-  ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/PerryLink/dsh-cert-mcp.git"
-  },
-  "funding": {
-    "type": "github",
-    "url": "https://github.com/sponsors/PerryLink"
-  },
-  "scripts": {
-    "test": "node test/smoke.mjs"
-  },
-  "mcpName": "io.github.perrylink/dsh-cert",
-  "publishConfig": {
-    "access": "public"
-  }
-}
+{
+  "name": "@perrylink/dsh-cert-mcp",
+  "version": "0.1.6",
+  "description": "Read-only MCP server exposing the dsh-plugin-certification registry: certification grades, snapshots and five-dimension evidence for DeepSeek Harness plugins.",
+  "type": "module",
+  "main": "./src/plugin.js",
+  "exports": {
+    ".": "./src/plugin.js",
+    "./package.json": "./package.json"
+  },
+  "license": "Apache-2.0",
+  "bin": {
+    "dsh-cert-mcp": "src/index.js"
+  },
+  "files": [
+    "src",
+    "data",
+    "cordis.patch.yml",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "mcp",
+    "mcp-server",
+    "model-context-protocol",
+    "deepseek-harness",
+    "dsh-plugin",
+    "dsh",
+    "certification",
+    "supply-chain-security"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/PerryLink/dsh-cert-mcp.git"
+  },
+  "funding": {
+    "type": "github",
+    "url": "https://github.com/sponsors/PerryLink"
+  },
+  "scripts": {
+    "test": "node test/smoke.mjs"
+  },
+  "mcpName": "io.github.perrylink/dsh-cert",
+  "publishConfig": {
+    "access": "public"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  }
+}

package/src/index.js

@@ -1,23 +1,23 @@
-#!/usr/bin/env node
-// Stdio transport for dsh-cert-mcp: newline-delimited JSON-RPC on stdin/stdout.
-
-import readline from 'node:readline'
-import { handleRequest } from './server.js'
-
-const rl = readline.createInterface({ input: process.stdin, crlfDelay: Infinity })
-
-for await (const line of rl) {
-  if (!line.trim()) continue
-  let req
-  try {
-    req = JSON.parse(line)
-  } catch {
-    continue // ignore malformed frames
-  }
-  try {
-    const res = await handleRequest(req)
-    if (res !== null) process.stdout.write(`${JSON.stringify(res)}\n`)
-  } catch (error) {
-    process.stdout.write(`${JSON.stringify({ jsonrpc: '2.0', id: req.id ?? null, error: { code: -32603, message: String(error?.message ?? error) } })}\n`)
-  }
-}
+#!/usr/bin/env node
+// Stdio transport for dsh-cert-mcp: newline-delimited JSON-RPC on stdin/stdout.
+
+import readline from 'node:readline'
+import { handleRequest } from './server.js'
+
+const rl = readline.createInterface({ input: process.stdin, crlfDelay: Infinity })
+
+for await (const line of rl) {
+  if (!line.trim()) continue
+  let req
+  try {
+    req = JSON.parse(line)
+  } catch {
+    continue // ignore malformed frames
+  }
+  try {
+    const res = await handleRequest(req)
+    if (res !== null) process.stdout.write(`${JSON.stringify(res)}\n`)
+  } catch (error) {
+    process.stdout.write(`${JSON.stringify({ jsonrpc: '2.0', id: req.id ?? null, error: { code: -32603, message: String(error?.message ?? error) } })}\n`)
+  }
+}

package/src/plugin.js

@@ -0,0 +1,71 @@
+// src/plugin.js —— DSH bundle host half
+//
+// Loaded through the `cordis.patch.yml` row (package.json `dsh.bundle.patch`)
+// when the package is installed as a DeepSeek Harness bundle:
+//
+//   dsh plugin --profile web add @perrylink/dsh-cert-mcp
+//
+// It re-registers the three read-only certification tools on the DSH tool
+// surface, 1:1 backed by the same `handleRequest` used by the stdio server
+// (bin: src/index.js), which keeps working unchanged for any MCP client.
+import { handleRequest } from './server.js'
+
+export const name = '@perrylink/dsh-cert-mcp'
+
+const TOOLS = [
+  {
+    name: 'get_certification',
+    description: 'Full certification record (grade, snapshot, five dimensions) for owner/repo',
+    parameters: {
+      type: 'object',
+      properties: {
+        owner: { type: 'string', description: 'GitHub owner of the plugin repository' },
+        repo: { type: 'string', description: 'GitHub repository name' },
+      },
+      required: ['owner', 'repo'],
+    },
+  },
+  {
+    name: 'list_certified',
+    description: 'Every entry in the public certification registry',
+    parameters: { type: 'object', properties: {} },
+  },
+  {
+    name: 'certification_spec',
+    description: 'Spec v1 summary: five dimensions, grade scale, veto rule',
+    parameters: { type: 'object', properties: {} },
+  },
+]
+
+async function callTool(tool, args) {
+  const response = await handleRequest({
+    method: 'tools/call',
+    params: { name: tool, arguments: args ?? {} },
+  })
+  const text = response?.result?.content?.[0]?.text
+  if (response?.result?.isError) throw new Error(text ?? 'certification lookup failed')
+  return text ?? JSON.stringify(response?.result ?? null)
+}
+
+export function apply(ctx) {
+  const tools = ctx.get('tools')
+  if (!tools) return
+  for (const tool of TOOLS) {
+    ctx.effect(() => tools.register({
+      name: tool.name,
+      description: tool.description,
+      parameters: tool.parameters,
+      output: {
+        schema: { type: 'string' },
+        render(args, value) {
+          return [{ type: 'text', text: String(value) }]
+        },
+      },
+      async execute(args) {
+        return callTool(tool.name, args)
+      },
+    }))
+  }
+}
+
+export default { name, apply }

package/src/server.js

@@ -1,140 +1,147 @@
-// Pure JSON-RPC core for dsh-cert-mcp. No transport, no side effects beyond
-// reading the embedded registry snapshot and optionally refreshing it from
-// the public dsh-plugin-certification repository.
-
-import { readFile } from 'node:fs/promises'
-
-const PROTOCOL_VERSION = '2024-11-05'
-const SERVER_INFO = { name: 'dsh-cert-mcp', version: '0.1.4' }
-const REGISTRY_URL = 'https://raw.githubusercontent.com/PerryLink/dsh-plugin-certification/main/data/certified.json'
-const REFRESH_MS = 5 * 60 * 1000
-
-let registry = null
-let lastFetch = 0
-
-const SPEC = `dsh-plugin-certification spec v1 evaluates a DSH plugin on five dimensions:
-
-A. manifest — dsh.bundle declaration, license, topics/keywords alignment, multi-language READMEs, engines range.
-B. buildHygiene — publish allowlist, peerDependencies, local gate chain (typecheck/test/build/verify/pack), CI green.
-C. supplyChain — OpenSSF Scorecard score with per-check evidence.
-D. releaseIntegrity — npm publish --provenance via Trusted Publishing.
-E. installSmoke — real install of the published package into a sandboxed DSH_HOME.
-
-Grades: A (all five pass), B (E environment-blocked only), C (non-critical dimension failures), D (critical dimension failures), veto overrides everything (severe supply-chain or install defects).`
-
-async function loadRegistry(force = false) {
-  if (!registry) {
-    const dataUrl = new URL('../data/certified.json', import.meta.url)
-    try {
-      registry = JSON.parse(await readFile(dataUrl, 'utf8'))
-    } catch {
-      registry = { specVersion: 'v1', generatedAt: null, entries: [] }
-    }
-  }
-  if (force || Date.now() - lastFetch > REFRESH_MS) {
-    try {
-      const res = await fetch(REGISTRY_URL, {
-        headers: { 'user-agent': 'dsh-cert-mcp' },
-        signal: AbortSignal.timeout(10_000),
-      })
-      if (res.ok) {
-        registry = await res.json()
-        lastFetch = Date.now()
-      }
-    } catch {
-      // keep the embedded snapshot; the registry repo may be unreachable
-    }
-  }
-  return registry
-}
-
-function findEntry(data, owner, repo) {
-  const key = `${owner}/${repo}`
-  return data.entries.find((entry) => entry.repo.toLowerCase() === key.toLowerCase()) ?? null
-}
-
-const TOOLS = [
-  {
-    name: 'get_certification',
-    description: 'Return the dsh-plugin-certification record for one DeepSeek Harness plugin repository (grade, snapshot date, five-dimension evidence).',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        owner: { type: 'string', description: 'GitHub owner, e.g. PerryLink' },
-        repo: { type: 'string', description: 'GitHub repository name, e.g. dsh-auto-review' },
-      },
-      required: ['owner', 'repo'],
-    },
-  },
-  {
-    name: 'list_certified',
-    description: 'List every plugin in the public dsh-plugin-certification registry with repo, grade and snapshot date.',
-    inputSchema: { type: 'object', properties: {} },
-  },
-  {
-    name: 'certification_spec',
-    description: 'Explain the dsh-plugin-certification spec v1: the five dimensions, the grade scale and the veto rule.',
-    inputSchema: { type: 'object', properties: {} },
-  },
-]
-
-export async function handleRequest(req) {
-  switch (req.method) {
-    case 'initialize':
-      return {
-        jsonrpc: '2.0',
-        id: req.id,
-        result: {
-          protocolVersion: PROTOCOL_VERSION,
-          capabilities: { tools: {} },
-          serverInfo: SERVER_INFO,
-        },
-      }
-    case 'notifications/initialized':
-      return null
-    case 'ping':
-      return { jsonrpc: '2.0', id: req.id, result: {} }
-    case 'tools/list':
-      return { jsonrpc: '2.0', id: req.id, result: { tools: TOOLS } }
-    case 'tools/call': {
-      const { name, arguments: args } = req.params ?? {}
-      const tool = TOOLS.find((candidate) => candidate.name === name)
-      if (!tool) {
-        return { jsonrpc: '2.0', id: req.id, error: { code: -32602, message: `Unknown tool: ${name}` } }
-      }
-      try {
-        const data = await loadRegistry()
-        let text
-        if (name === 'get_certification') {
-          if (!args || typeof args.owner !== 'string' || typeof args.repo !== 'string') {
-            throw new Error('owner and repo are required')
-          }
-          const entry = findEntry(data, args.owner, args.repo)
-          text = entry
-            ? JSON.stringify(entry, null, 2)
-            : `No certification record for ${args.owner}/${args.repo} in registry snapshot ${data.generatedAt ?? 'unknown'}.`
-        } else if (name === 'list_certified') {
-          const list = data.entries.map((entry) => ({ repo: entry.repo, grade: entry.grade, snapshot: entry.snapshot }))
-          text = JSON.stringify({ specVersion: data.specVersion, generatedAt: data.generatedAt, count: list.length, entries: list }, null, 2)
-        } else {
-          text = SPEC
-        }
-        return {
-          jsonrpc: '2.0',
-          id: req.id,
-          result: { content: [{ type: 'text', text }] },
-        }
-      } catch (error) {
-        return {
-          jsonrpc: '2.0',
-          id: req.id,
-          result: { content: [{ type: 'text', text: `Error: ${error.message}` }], isError: true },
-        }
-      }
-    }
-    default:
-      return { jsonrpc: '2.0', id: req.id, error: { code: -32601, message: `Method not found: ${req.method}` } }
-  }
-}
-
-export { SERVER_INFO, PROTOCOL_VERSION }
+// Pure JSON-RPC core for dsh-cert-mcp. No transport, no side effects beyond
+// reading the embedded registry snapshot and optionally refreshing it from
+// the public dsh-plugin-certification repository.
+
+import { readFile } from 'node:fs/promises'
+
+const PROTOCOL_VERSION = '2024-11-05'
+const SERVER_INFO = { name: 'dsh-cert-mcp', version: '0.1.5' }
+const REGISTRY_URL = 'https://raw.githubusercontent.com/PerryLink/dsh-plugin-certification/main/data/certified.json'
+const REFRESH_MS = 5 * 60 * 1000
+
+let registry = null
+let lastFetch = 0
+
+const SPEC = `dsh-plugin-certification spec v1 evaluates a DSH plugin on five dimensions:
+
+A. manifest — dsh.bundle declaration, license, topics/keywords alignment, multi-language READMEs, engines range.
+B. buildHygiene — publish allowlist, peerDependencies, local gate chain (typecheck/test/build/verify/pack), CI green.
+C. supplyChain — OpenSSF Scorecard score with per-check evidence.
+D. releaseIntegrity — npm publish --provenance via Trusted Publishing.
+E. installSmoke — real install of the published package into a sandboxed DSH_HOME.
+
+Grades (spec v1 — the registry README is the owner of these definitions):
+- A — all five pass (E must be "ok"), no veto hit.
+- B — E passes and at least three of A/B/C/D pass. An E that ends "install-fail" purely because of an unattended-environment gate (e.g. pnpm's interactive approve-builds cannot be confirmed in a sandbox) also keeps B when A–D pass, and records "environment-blocked".
+- C — E passes, the rest incomplete.
+- D — any hard gate fails (dsh.bundle missing, no license, malicious pattern hit).
+- Security veto — obfuscated code, credential exfiltration, or surprising install-time behaviour grades D immediately, with the reason published.
+- Environment gates are never recorded as D.
+- Evidence discipline: every score comes from real, reproducible execution; absent evidence is "no-evidence", never a guess.`
+
+async function loadRegistry(force = false) {
+  if (!registry) {
+    const dataUrl = new URL('../data/certified.json', import.meta.url)
+    try {
+      registry = JSON.parse(await readFile(dataUrl, 'utf8'))
+    } catch {
+      registry = { specVersion: 'v1', generatedAt: null, entries: [] }
+    }
+  }
+  if (force || Date.now() - lastFetch > REFRESH_MS) {
+    try {
+      const res = await fetch(REGISTRY_URL, {
+        headers: { 'user-agent': 'dsh-cert-mcp' },
+        signal: AbortSignal.timeout(10_000),
+      })
+      if (res.ok) {
+        registry = await res.json()
+        lastFetch = Date.now()
+      }
+    } catch {
+      // keep the embedded snapshot; the registry repo may be unreachable
+    }
+  }
+  return registry
+}
+
+function findEntry(data, owner, repo) {
+  const key = `${owner}/${repo}`
+  return data.entries.find((entry) => entry.repo.toLowerCase() === key.toLowerCase()) ?? null
+}
+
+const TOOLS = [
+  {
+    name: 'get_certification',
+    description: 'Return the dsh-plugin-certification record for one DeepSeek Harness plugin repository (grade, snapshot date, five-dimension evidence).',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        owner: { type: 'string', description: 'GitHub owner, e.g. PerryLink' },
+        repo: { type: 'string', description: 'GitHub repository name, e.g. dsh-auto-review' },
+      },
+      required: ['owner', 'repo'],
+    },
+  },
+  {
+    name: 'list_certified',
+    description: 'List every plugin in the public dsh-plugin-certification registry with repo, grade and snapshot date.',
+    inputSchema: { type: 'object', properties: {} },
+  },
+  {
+    name: 'certification_spec',
+    description: 'Explain the dsh-plugin-certification spec v1: the five dimensions, the grade scale and the veto rule.',
+    inputSchema: { type: 'object', properties: {} },
+  },
+]
+
+export async function handleRequest(req) {
+  switch (req.method) {
+    case 'initialize':
+      return {
+        jsonrpc: '2.0',
+        id: req.id,
+        result: {
+          protocolVersion: PROTOCOL_VERSION,
+          capabilities: { tools: {} },
+          serverInfo: SERVER_INFO,
+        },
+      }
+    case 'notifications/initialized':
+      return null
+    case 'ping':
+      return { jsonrpc: '2.0', id: req.id, result: {} }
+    case 'tools/list':
+      return { jsonrpc: '2.0', id: req.id, result: { tools: TOOLS } }
+    case 'tools/call': {
+      const { name, arguments: args } = req.params ?? {}
+      const tool = TOOLS.find((candidate) => candidate.name === name)
+      if (!tool) {
+        return { jsonrpc: '2.0', id: req.id, error: { code: -32602, message: `Unknown tool: ${name}` } }
+      }
+      try {
+        const data = await loadRegistry()
+        let text
+        if (name === 'get_certification') {
+          if (!args || typeof args.owner !== 'string' || typeof args.repo !== 'string') {
+            throw new Error('owner and repo are required')
+          }
+          const entry = findEntry(data, args.owner, args.repo)
+          text = entry
+            ? JSON.stringify(entry, null, 2)
+            : `No certification record for ${args.owner}/${args.repo} in registry snapshot ${data.generatedAt ?? 'unknown'}.`
+        } else if (name === 'list_certified') {
+          const list = data.entries.map((entry) => ({ repo: entry.repo, grade: entry.grade, snapshot: entry.snapshot }))
+          text = JSON.stringify({ specVersion: data.specVersion, generatedAt: data.generatedAt, count: list.length, entries: list }, null, 2)
+        } else {
+          text = SPEC
+        }
+        return {
+          jsonrpc: '2.0',
+          id: req.id,
+          result: { content: [{ type: 'text', text }] },
+        }
+      } catch (error) {
+        return {
+          jsonrpc: '2.0',
+          id: req.id,
+          result: { content: [{ type: 'text', text: `Error: ${error.message}` }], isError: true },
+        }
+      }
+    }
+    default:
+      return { jsonrpc: '2.0', id: req.id, error: { code: -32601, message: `Method not found: ${req.method}` } }
+  }
+}
+
+export { SERVER_INFO, PROTOCOL_VERSION }